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Title of Invention: Distant change of account and authentication algorithm for a multi-subscribers card. 
I Whul is the field of the invention? 

The invention can be applied to allow operators to execute a soft migration of their AuC equipment and SIM Cards 
from Hie use of un algorithm version (for example the A3 AS HtgoTilhm) to a new one. 



2 What is nlrdadv known? 

At this time, when an operator wants to update an AuC (Authentication Cantor), he needs to buy a new one with the 
wanted functionalities, then to transfer M the couples |JMSI, Kil from the old one to the new one or to update the 
software version* 

AuC is apart of the MLR in charge of Authentication. 

TMSI is the Intemuttonal Mobile Subscriber Identity; Ki is an authentication key. 

In case of partial migration, this also changes the MSISDN (Mobile Station Integrated Service Data Network number. 
Subscriber's phone number.) of the users because the IILRtflome location Register) comes with the AuC. 

In the case of updating from a version of A3A8 algorithm to another one, as the algorithm as to be present in the card, 
it implies to synchronize the purchase of the AuC with the purchase of new cards. 



3JKb«t.i>roWcm nc«ite solved* 

Three problems enn be identified: 

• The synchronization of both purchascs. 

• The fact that you need a second AuC to upgrade one. 

• The user needs a new card and phone number 



4 How is the urublcin solved? 

Hie proposed solution needs the use of a card with two couples [IMSI, Ki]: one linked to the first A3 A8 algorithm, 
the othei to the second A3 A8 algorithm. 

Tt also needs to hove the AuC equipped with the automatic card renewing / replacement function. 

The upciitlui xUne in his AuC two couples [IMSi, Ki] for tlw sum* MSISDN, urn linked U> the first A3A8 algorithm, 
the other to the second A3 AS algorithm. 

The problem is solved when using a special OTA command or group of commands that will make the card change its 
account, while the [IMSI, Ki] is also switched inside the AuC. 

This way, the switch between the two algorithms doesn't need another AuC, and it can be done card-by-card it the 
operator wants, not all at the same time 



5 Detailed doscrlntion o < * pr^Hcat exninnle 

When the migration has to be done, the operator sends a special command (for example an OTA (Over The Air) 
Command) that will activate a flag on the card to tell it to switch from otic [1MSU Ki] to the other on the next: 

• OFF/ON of the card 

- Refresh 
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o Simlnit 

o Rcscil 

o Full File Change Notification 

o File Change Notification 



At the first authentication with the new account, and then the new algorithm, the card fiends the authentication 
request to the AuC 

The AuC equipped with the automatic curd renewing / replacement function, automatically switches to the new 
algorithm and authentify the card and flic new aeeount, 

The old [ 1MSI, Ki'| becomes useless and may be then erased to ficc memory space in the database. 



■ K • ' ^ ^ 009 11.03.2002 17:04 

Claims 



£nge or account and authentication algorithm for a multi-subscribers card in a data processing system including n 
rami connected man AnC (AnlhettUcaLion Uwiler), , 
-said card comprising two couples [1MSI, KiJ, one linked to a first authentication algorithm, the other to a second 
authentication algorithm 

- the AuC being equipped with an automatic card renewing / replacement function, 

the migration consisting in sending a special command thai will activate » nag on the card to tell it to switch from 
one [IMS1. Ki] to the other 1 1MSI. KiJ. 
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Figure 1 
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Figure 2 
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Figure 3 
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